| Package | Affected versions | Patched versions |
|---|---|---|
| entity framework core provider | ≥ 10.0.0, < 10.0.3≥ 8.0.0, < 8.4.3≥ 9.0.0, < 9.1.3 | 10.0.38.4.39.1.3 |
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free